MAL-2025-32446 Malicious code in rose-ehpcl-0rkjr-twilight-project (npm)

The package rose-ehpcl-0rkjr-twilight-project was found to contain malicious code...

MAL-2025-32452 Malicious code in rose-nymph-esr138-project (npm)

The package rose-nymph-esr138-project was found to contain malicious code...

MAL-2025-28063 Malicious code in obsidian-8d87p-e0waw-rose-project (npm)

The package obsidian-8d87p-e0waw-rose-project was found to contain malicious code...

MAL-2025-32450 Malicious code in rose-koala-cxl197-project (npm)

The package rose-koala-cxl197-project was found to contain malicious code...

MAL-2025-32457 Malicious code in rose-whirlpool-abs347-project (npm)

The package rose-whirlpool-abs347-project was found to contain malicious code...

MAL-2025-24073 Malicious code in juniper-a7ce1-utbt8-rose-project (npm)

The package juniper-a7ce1-utbt8-rose-project was found to contain malicious code...

MAL-2025-32458 Malicious code in rose-y3znm-d3hdt-unity-project (npm)

The package rose-y3znm-d3hdt-unity-project was found to contain malicious code...

MAL-2025-22321 Malicious code in hearth-95bye-rdp1t-rose-project (npm)

The package hearth-95bye-rdp1t-rose-project was found to contain malicious code...

MAL-2025-31081 Malicious code in quail-rose-pcs068-project (npm)

The package quail-rose-pcs068-project was found to contain malicious code...

MAL-2025-32445 Malicious code in rose-dove-yjn704-project (npm)

The package rose-dove-yjn704-project was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2022-2318

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any...

DEBIAN-CVE-2025-38377

In the Linux kernel, the following vulnerability has been resolved: rose: fix dangling neighbour pointers in rosertdevicedown There are two bugs in rosertdevicedown that can cause use-after-free: 1. The loop bound t-count is modified within the loop, which can cause the loop to terminate early an...

UBUNTU-CVE-2025-38377

In the Linux kernel, the following vulnerability has been resolved: rose: fix dangling neighbour pointers in rosertdevicedown There are two bugs in rosertdevicedown that can cause use-after-free: 1. The loop bound t-count is modified within the loop, which can cause the loop to terminate early an...

CVE-2025-38377: Use After Free

In the Linux kernel, the following vulnerability has been resolved: rose: fix dangling neighbour pointers in rosertdevicedown There are two bugs in rosertdevicedown that can cause use-after-free: 1. The loop bound t-count is modified within the loop, which can cause the loop to terminate early an...

USN-7651-6 linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - S390 architecture; - Block layer subsystem; - Serial ATA and Parallel ATA drivers; - Driver...

USN-7651-5 linux-raspi-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - S390 architecture; - Block layer subsystem; - Serial ATA and Parallel ATA drivers; - Driver...

CVE-2022-50163 ax25: fix incorrect dev_tracker usage

In the Linux kernel, the following vulnerability has been resolved: ax25: fix incorrect devtracker usage While investigating a separate rose issue 1, and enabling CONFIGNETDEVREFCNTTRACKER=y, Bernard reported an orthogonal ax25 issue 2 An ax25dev can be used by one or many struct ax25cb. We thus...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net/rose: integer overflows can occur when using rosesetsockopt with potentially excessively large arguments, along with additional values being applied to them. To mitigate this issue, perform the following actions as a minimum...

Malicious code in rose-web3-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86e7bba39177d14d11698b3ccaeca36599df068894146efc99d0ded173449d9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in rose-web3-utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...